Exam 12: Information Systems Development

Which of the following is used for biometric authentication?

What are the three general sources of security threats?

A ________ examines each part of a message and determines whether to let that part pass.

Which of the following statements is true of the Secure Socket Layer (SSL)?

________ protect databases and other organizational data.

A Trojan horse is a virus that masquerades as a useful program or file.

Faulty service excludes problems that result due to incorrect data modification.

________ take computers with wireless connections through an area and search for unprotected wireless networks and then monitor and intercept wireless traffic at will.

________ is similar to spyware but it watches user activity and produces pop-ups.

________ is a technique for intercepting computer communications, either through a physical connection to a network or without a physical connection in the case of wireless networks.

Which of the following is a critical security function that the senior management should address in an organization?

Discuss some human safeguards for employees that can ensure the security of information systems.

________ refers to an organization-wide function that is in charge of developing data policies and enforcing data standards.

SQL injection attack occurs when users enter an SQL statement into a form in which they are supposed to enter a name or other data.

Which of the following systems procedures is specifically the responsibility of operations personnel?

It is easy and economical to hold public users of Web sites accountable for security violations.

Cookies enable an individual to access Web sites without having to sign in every time.

Users of smart cards are required to enter a ________ to be authenticated.

The existence of accounts that are no longer in use are not a security threat to an organization.

________ is the type of security loss that involves computer criminals invading a computer system and replacing legitimate programs with their own unauthorized ones that shut down legitimate applications and substitute their own processing to spy, steal, and manipulate data.